Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/323830343a363066633a3a2f33322d3332203d3e20323639323034.roa
File:                     323830343a363066633a3a2f33322d3332203d3e20323639323034.roa (raw, json)
Hash identifier:          rTokAFc/AP60tmYTHi5kDpCtrpMLC4Q17VXByJ+QH+0=
Subject key identifier:   86:CA:C8:D2:ED:36:C9:62:3B:9C:6A:8A:9B:7F:CF:71:DF:7E:2C:F6
Certificate issuer:       /CN=6A8DD0D910DC10523A6AD7372DD40A15D0165369
Certificate serial:       11E421A8745AF1EC0B13E71693FD71767255C4EE
Authority key identifier: 6A:8D:D0:D9:10:DC:10:52:3A:6A:D7:37:2D:D4:0A:15:D0:16:53:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8DD0D910DC10523A6AD7372DD40A15D0165369.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/323830343a363066633a3a2f33322d3332203d3e20323639323034.roa
Signing time:             Wed 30 Oct 2024 10:02:46 +0000
ROA not before:           Wed 30 Oct 2024 09:57:46 +0000
ROA not after:            Wed 29 Oct 2025 10:02:46 +0000
asID:                     269204
IP address blocks:        2804:60fc::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e4:21:a8:74:5a:f1:ec:0b:13:e7:16:93:fd:71:76:72:55:c4:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A8DD0D910DC10523A6AD7372DD40A15D0165369
        Validity
            Not Before: Oct 30 09:57:46 2024 GMT
            Not After : Oct 29 10:02:46 2025 GMT
        Subject: CN=86CAC8D2ED36C9623B9C6A8A9B7FCF71DF7E2CF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:22:6b:7b:28:95:bc:7f:06:ab:ba:80:9d:27:
                    b3:7a:ff:50:b4:89:51:8e:2b:d7:cb:38:28:0a:ab:
                    dd:81:f2:09:aa:af:85:36:c0:48:c2:cb:8f:eb:3a:
                    52:22:d4:76:de:f2:ce:54:7c:15:75:1a:83:af:d6:
                    be:7c:c7:18:e0:d7:a8:1f:ec:c8:cf:7a:9a:1e:47:
                    54:86:1d:54:18:8a:b1:a4:40:df:e2:dc:72:c8:f1:
                    1a:b0:fc:b4:8d:5f:e9:1b:d5:5b:80:b3:8f:c9:97:
                    bf:25:ec:6a:69:d8:a0:d6:80:7a:a6:28:33:27:a6:
                    5a:e8:55:97:9c:43:27:9f:b3:76:31:f2:a1:6d:49:
                    1b:62:1c:7b:ae:99:e6:12:2e:05:41:ac:2d:7b:8b:
                    68:68:b8:73:54:35:9f:de:84:f9:d9:8a:63:b4:02:
                    fb:46:e2:4c:4e:a0:ee:b0:a5:83:05:51:6a:c1:d4:
                    6a:5d:55:a0:86:8e:1a:17:49:4e:2c:b8:da:3c:1b:
                    d6:5e:88:d9:d5:ea:4c:10:0b:28:5d:b5:1f:1f:19:
                    da:74:7d:b5:6b:9d:8a:f7:00:4d:6a:68:0d:7f:39:
                    eb:01:86:7c:bd:26:38:9f:4a:fa:fa:e7:b7:8d:65:
                    df:72:99:0e:14:71:ab:48:ae:d5:82:86:56:f9:a7:
                    cb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CA:C8:D2:ED:36:C9:62:3B:9C:6A:8A:9B:7F:CF:71:DF:7E:2C:F6
            X509v3 Authority Key Identifier:
                keyid:6A:8D:D0:D9:10:DC:10:52:3A:6A:D7:37:2D:D4:0A:15:D0:16:53:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/6A8DD0D910DC10523A6AD7372DD40A15D0165369.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8DD0D910DC10523A6AD7372DD40A15D0165369.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/323830343a363066633a3a2f33322d3332203d3e20323639323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:db:8c:da:49:0f:b3:5f:de:69:54:ba:0b:4d:8a:60:01:ab:
         75:af:73:b1:ad:87:ff:fa:11:5c:83:c2:06:2d:00:ab:f2:3d:
         85:e8:38:37:ad:a6:0b:8d:e6:fa:f9:e8:f2:fb:9c:5c:e4:52:
         5a:bc:db:e4:0d:3e:af:c6:a0:2d:29:05:ee:96:6d:6e:91:34:
         7a:1c:b6:8e:8c:22:6b:6d:5e:51:de:84:5f:0f:a4:b5:4a:19:
         b6:58:9f:bb:c7:26:fe:41:8c:8f:47:8f:c9:1e:bc:cb:96:46:
         40:72:a4:a2:6b:db:28:d4:8b:52:5d:a4:97:b4:75:2a:10:2c:
         04:da:16:50:b3:8a:64:aa:5e:30:16:e3:0f:ab:d3:b7:03:b7:
         d5:0c:27:e2:02:b0:90:7b:cf:a3:9a:1b:ce:2e:a8:e8:f4:f8:
         bd:34:e4:15:da:91:03:e6:6e:46:7d:c7:e9:2d:ea:1d:b9:9d:
         00:6d:67:e6:13:8a:f5:d5:f8:35:43:66:8a:03:83:41:c6:a2:
         6c:1b:fe:e5:fd:ff:f3:62:97:37:aa:f2:b0:b0:4a:eb:09:9c:
         b2:aa:45:44:8e:b6:a9:27:28:59:09:d5:ef:fa:e2:da:01:42:
         3e:22:9b:e0:8d:e0:20:71:3a:6f:bb:41:d3:d7:e3:28:78:15:
         f5:12:b9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----